I have finished the project I have started at the KOS. It is an extension point that allows you to implement own authentication methods for the KREST nodes. It is available in the nightly build. The extension point ID is com.cenix.jerseyauth.custom.
The simple cookie extension is still in place.
If you have question, let me know.